Read the docs

dpgaspar

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

dpgaspar records in CISA KEV

No dpgaspar vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flask-appbuilder 13 records MEDIUM

Records

13 records in Flask-appbuilder · all components

TI-2021-18097 CVE-2021-41265 · GHSA-m3rf-7m4w-r66q

Improper Authentication in Flask-AppBuilder

Priority MEDIUM 41

Flask-AppBuilder is a development framework built on top of Flask.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01317 Published 2021-12-09 Fixed in 3.3.4 CWE-287
TI-2023-13466 CVE-2023-29005 · GHSA-9hcr-9hcv-x6pv

No Rate Limiting on Login AUTH DB

Priority MEDIUM 40

Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00629 Published 2023-04-10 Fixed in 4.3.0 CWE-307
TI-2022-06037 CVE-2022-21659 · GHSA-wfjw-w6pv-8p7f

Observable Response Discrepancy in Flask-AppBuilder

Priority LOW 32

Flask-AppBuilder is an application development framework, built on top of the Flask web framework.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00953 Published 2022-01-31 Fixed in 3.4.4 CWE-203
TI-2022-08590 CVE-2022-24776 · GHSA-2ccw-7px8-vmpf

Open Redirect in Flask-AppBuilder

Priority LOW 29

Flask-AppBuilder is an application development framework, built on top of the Flask web framework.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00968 Published 2022-03-24 Fixed in 3.4.5 CWE-601
Open these records in search →